apache/dolphinscheduler
GitHub で見る[DSIP-36][Dependency] Upgrading dependent component versions
Open
#15,940 opened on 2024年4月29日
DSIPhelp wantedpriority:high
Repository metrics
- Stars
- (11,659 stars)
- PR merge metrics
- (平均マージ 2d 21h) (30d で 22 merged PRs)
説明
Search before asking
- I had searched in the DSIP and found no similar DSIP.
Motivation
There are a lot of dependencies in DS that have CVE, we need to upgrade these versions, otherwise there will be security issues
Design Detail
We need to find safe versions, preferably a compatible one, and upgrade.
Compatibility, Deprecation, and Migration Plan
Should ve Compatibility.
Test Plan
Test by UT/E2E.
Code of Conduct
- I agree to follow this project's Code of Conduct